$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.cer File: AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.cer (raw, json) Hash identifier: lxQm0QnhLnkdHu7m2GpocUPKfqtmBmXxqCCJ0EzbZvc= Subject key identifier: AA:30:F7:8D:E6:E9:B0:80:AA:F8:A4:AB:04:2F:F1:BD:2C:8B:61:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 066A9E20AF8E4B7CCA9D45CF4572BAB1B324FD45 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.mft caRepository: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 23:36:32 +0000 Certificate not after: Mon 08 Sep 2025 23:41:32 +0000 Subordinate resources: AS: 267142 IP: 45.229.240.0/22 IP: 2804:48c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6a:9e:20:af:8e:4b:7c:ca:9d:45:cf:45:72:ba:b1:b3:24:fd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 23:36:32 2024 GMT Not After : Sep 8 23:41:32 2025 GMT Subject: CN=AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:84:83:ff:cc:06:d8:4c:fc:1a:fc:90:0f: b2:54:3b:c1:54:64:99:30:cb:80:23:46:d2:72:15: 2f:14:0d:60:1d:30:5f:be:04:14:77:ff:3f:25:d6: ce:71:13:c8:a9:58:e8:55:5f:d6:c6:df:e4:ee:e0: b4:26:a1:26:f6:de:92:6e:cb:c7:5f:45:78:ee:2f: 16:35:e6:a6:bc:b8:e8:f9:71:41:f0:6f:39:13:54: d2:a7:b4:44:da:14:23:9d:a1:19:92:26:83:04:44: 8d:e9:83:7e:aa:d3:f8:9f:f6:52:b2:c6:61:69:85: c6:f9:bf:ae:22:50:cd:47:3a:fd:df:6e:ba:dc:f4: b0:6d:0e:ec:17:4b:03:59:20:a1:33:ee:2a:40:d0: e7:fa:ee:7c:b4:1d:96:98:b5:d6:33:47:f3:cf:1e: cd:e2:c5:82:ac:a2:6f:83:48:fc:39:11:47:cc:4f: 13:3d:5f:9e:89:80:c5:c3:8a:c5:46:58:be:4a:9b: ba:05:2e:bc:76:76:7f:9e:bf:15:62:0b:11:fe:03: c2:2e:1e:f1:cb:8c:45:d8:f0:94:18:5d:f4:12:50: 49:97:89:a1:e4:73:c1:fa:36:9b:4d:28:2c:3d:c2: 4e:b8:aa:78:08:44:0f:1f:2f:d3:89:62:5e:f6:bf: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:30:F7:8D:E6:E9:B0:80:AA:F8:A4:AB:04:2F:F1:BD:2C:8B:61:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.240.0/22 IPv6: 2804:48c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267142 Signature Algorithm: sha256WithRSAEncryption 4d:37:03:4c:e3:7f:db:11:08:49:97:69:2a:a5:33:f1:bf:c3: bf:1f:ab:3f:8f:14:10:46:02:83:56:d6:c1:aa:f6:34:58:9a: 1d:ec:6c:38:b5:1c:8f:2b:0c:90:e8:10:b5:20:a0:eb:7f:32: ae:7f:80:4e:70:d6:2c:f0:19:c6:70:12:fe:ee:2a:31:d6:26: c3:40:e1:d4:a3:11:db:87:91:b8:3e:7e:2a:f5:93:77:fe:14: 8b:67:f5:af:c8:41:a0:e5:bf:08:6d:1d:d4:62:35:4a:40:e1: 03:35:92:26:7e:e7:be:40:c3:1b:93:08:ca:29:7b:bd:f9:10: 93:b1:05:79:ab:42:b0:44:62:a3:04:83:69:4c:22:f8:72:53: 67:0a:bc:82:5d:b2:07:96:d8:a3:9c:39:91:95:aa:d3:4e:6e: 5e:d0:45:e0:44:b5:53:77:dd:7b:77:60:1d:9e:d7:9d:9c:77: 29:b8:1b:60:8b:e3:37:82:22:87:dc:ad:78:96:33:93:55:0a: e4:ef:70:f1:c7:fc:06:d8:b5:eb:0e:29:e7:cc:ad:1b:c0:e7: a6:f1:f3:0c:4b:f6:b6:3d:16:4d:6c:90:08:68:fb:48:9f:ee: 90:3c:7e:ba:4c:d9:df:9d:ef:fd:2e:ee:3d:1d:d7:f2:0d:31: ad:b9:b1:2e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBmqeIK+OS3zKnUXPRXK6sbMk/UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDkyMzM2MzJaFw0yNTA5MDgyMzQxMzJaMDMxMTAvBgNV BAMTKEFBMzBGNzhERTZFOUIwODBBQUY4QTRBQjA0MkZGMUJEMkM4QjYxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfuISD/8wG2Ez8GvyQD7JUO8FU ZJkwy4AjRtJyFS8UDWAdMF++BBR3/z8l1s5xE8ipWOhVX9bG3+Tu4LQmoSb23pJu y8dfRXjuLxY15qa8uOj5cUHwbzkTVNKntETaFCOdoRmSJoMERI3pg36q0/if9lKy xmFphcb5v64iUM1HOv3fbrrc9LBtDuwXSwNZIKEz7ipA0Of67ny0HZaYtdYzR/PP Hs3ixYKsom+DSPw5EUfMTxM9X56JgMXDisVGWL5Km7oFLrx2dn+evxViCxH+A8Iu HvHLjEXY8JQYXfQSUEmXiaHkc8H6NptNKCw9wk64qngIRA8fL9OJYl72v9xnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqMPeN5umwgKr4 pKsEL/G9LIth7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGho YWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ro aGFjSkZnV3M5d0s5Q3VFUFRYZVFDMVhEd2poZ01OSnMzelRoOXc5dEJVLzAvQUEz MEY3OERFNkU5QjA4MEFBRjhBNEFCMDQyRkYxQkQyQzhCNjFFRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeXwMA0EAgACMAcDBQAoBEjAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQThjANBgkqhkiG9w0BAQsFAAOCAQEATTcDTON/2xEISZdp KqUz8b/Dvx+rP48UEEYCg1bWwar2NFiaHexsOLUcjysMkOgQtSCg638yrn+ATnDW LPAZxnAS/u4qMdYmw0Dh1KMR24eRuD5+KvWTd/4Ui2f1r8hBoOW/CG0d1GI1SkDh AzWSJn7nvkDDG5MIyil7vfkQk7EFeatCsERiowSDaUwi+HJTZwq8gl2yB5bYo5w5 kZWq005uXtBF4ES1U3fde3dgHZ7XnZx3KbgbYIvjN4Iih9yteJYzk1UK5O9w8cf8 Bti16w4p58ytG8DnpvHzDEv2tj0WTWyQCGj7SJ/ukDx+ukzZ353v/S7uPR3X8g0x rbmxLg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:09 2024 by rpki-client on console.sobornost.net